Stunnel connections show as 127.0.0.1

[motasinc]

Using kernel 2.6 I now have all my SSL stunnel connections (Port 3500) showing up as from 127.0.0.1, which I could fix by adding transparent = yes in stunnel.conf in earlier kernels.

Not all that big a deal other than now my resellers cannot add SSH user access because the shellmanager cannot determine the IP of the connected party.

I have already tried disabling SSH security so it should not be caring what IP you come from but this did not help. Any suggestions?

[Jeremy]

im confused sorry :)

run
netstat -natp|grep stunnel

and
cat /var/db/dsm/conf/stunnel.conf

paste the output.

[motasinc]

What are you confused about? Kernel 2.4+ needs a patch to support transparent proxy of stunnel.

The stunnel.conf is the default one installed by DSM.

[Jeremy]

I'm confused because im not a guru? ;)

What does netstat say?

what 2.4 kernel are you running?

do u know how to compile it from source?

I'm a CCNE vs the RHEC but im almost done with the redhat courses.

[motasinc]

netstat is irrelevant, all the ports are open and working fine, the problem is the Kernel 2.4 and above and transparent proxy. This is not the problem I am trying to solve. What I want to know is how I can tell canfigure shell access for users from a reseller account without it requiring an IP.

[Jeremy]

I think what you mean is....

/etc/hosts.deny

its set to deny all.

but in

/etc/hosts.allow

will only allow the IPs listed.

I guess what you can do is allow the /0 (the whole internet)

maybe you can just remove the sshd: ALL in the deny, but i don't know if DSM will add it back.

Let me know if thats what you ment...